CE6800 fails to establish connection with NMS via SNMP

Created: Apr 21, 2017 11:47:33Latest reply: Apr 21, 2017 11:49:58 928 1 0 0
Cloud Engine device is configured with SNMP v2c, but fails to establish the connection with SNMP. From display logbuffer it seems that the IP of the SNMP
is being blocked, even though his IP is permitted by ACL.
  • x
  • convention:

ms.america  Visitor   Created Apr 21, 2017 11:49:58 Helpful(0) Helpful(0)

<ssc-dcacc-ph-22>dis logb<?xml:namespace prefix = "o" />

Logging buffer configuration and contents :enabled

Allowed max buffer size : 10240

Actual buffer size : 512

Channel number : 4 , Channel name : logbuffer

Dropped messages : 0

Overwritten messages : 1244

Current messages : 512

Sep 5 2016 12:44:17+02:00 DST
ssc-dcacc-ph-22 %%01SNMP/4/SNMP_BLACKLIST_UNBLOCK(s):CID=0x80d50408;User IPAddress = 10.12.208.23 unblocked.

Sep 5 2016 12:39:16+02:00 DST
ssc-dcacc-ph-22 %%01SNMP/4/SNMP_BLACKLIST(s):CID=0x80d50408;User IPAddress = 10.12.208.23 blocked.

Sep 5 2016 12:39:16+02:00 DST
ssc-dcacc-ph-22 %%01SNMP/4/AUTHENTICATIONFAILURE(s):CID=0x80d50408;Failed to login through SNMP.(IPAddress=10.12.208.23, ReasonInfo=Community is incorrect.)

Sep 5 2016 12:39:13+02:00 DST
ssc-dcacc-ph-22 %%01SNMP/4/SNMP_BLACKLIST_UNBLOCK(s):CID=0x80d50408;User IPAddress = 10.12.208.23 unblocked.

Sep 5 2016 12:34:16+02:00 DST
ssc-dcacc-ph-22 %%01SNMP/4/SNMP_BLACKLIST(s):CID=0x80d50408;User IPAddress = 10.12.208.23 blocked.

Sep 5 2016 12:34:13+02:00 DST
ssc-dcacc-ph-22 %%01SNMP/4/AUTHENTICATIONFAILURE(s):CID=0x80d50408;Failed to login through SNMP.(IPAddress=10.12.208.23, ReasonInfo=Community is incorrect.)

Sep 5 2016 12:33:01+02:00 DST ssc-dcacc-ph-22
%%01SNMP/4/SNMP_BLACKLIST_UNBLOCK(s):CID=0x80d50408;User IPAddress = 10.12.208.23 unblocked.



transparent.gif Handling Process

After analyzing the output from display logbuffer, it can be noticed a few log entries with error message “Community is incorrect”.

Next step , double check and confirm that the community is correct.

Next step, check the SNMP configuration on device.

snmp-agent acl 2000

snmp-agent local-engineid 800007DB0368A82823A7A1

snmp-agent community read cipher %@%@*

snmp-agent community write cipher %@%@

snmp-agent sys-info contact ABC

snmp-agent sys-info location MER1-PH (Kast 15)

snmp-agent sys-info version v2c v3

snmp-agent target-host trap address
udp-domain 10.12.208.23 source Vlanif1980 params securityname cipher @% v2c

snmp-agent target-host trap address
udp-domain 10.12.216.15 source Vlanif1980 params securityname cipher @% v2c


The SNMP configuration is correct.

Next step: analyze SNMP packets captured on NMS.


From this packets we can notice different SNMP packets, originated from NMS, with different Community strings.<?xml:namespace prefix = "v" />











  • x
  • convention:

Reply

Reply
You need to log in to reply to the post Login | Register

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " Privacy."
If the attachment button is not available, update the Adobe Flash Player to the latest version!
Fast reply Scroll to top